Skip to main content
CadNews - Comparative News Analysis
Topics
Sign in
Back to brief

Crypto · October 30, 2026

Trezor reports suspected hardware implant in Safe 5 sold by CryptoBilis

3 sources →

Trezor has issued an urgent warning to customers who purchased devices through the reseller CryptoBilis, following a report of a suspected hardware implant in a Trezor Safe 5. The security alert affects users who purchased wallets from the reseller since March 2026. While Trezor has not yet physically examined the compromised device, it is treating the report—received through its responsible disclosure program on October 28—as credible. The company advised affected users to migrate their funds to new wallets with fresh recovery phrases, though no loss of funds has been reported to date.

Read the original coverage

Hype check

How the hype check works

Confirmed · 1

Backed by filings, on-chain data, official statements or several independent publishers.

  • Trezor issued a fund migration warning for CryptoBilis customers. (Trezor)

Claimed · 2

Said by a company, project or person; not yet independently confirmed.

  • A hardware implant was discovered in a Safe 5 device bought in August 2026. (An Indonesian customer)
  • The implant reads screen data and sends it over a mobile network. (Trezor)

Speculation · 0

Price talk, forecasts or unnamed sources, quoted as someone else's view.

  • None identified.

Reported by multiple outlets

  • Trezor received a report of a suspected hardware implant in a Safe 5 device.
  • The device in question was purchased from the reseller CryptoBilis.
  • Trezor urged customers who bought from CryptoBilis since March to move their funds.
  • The report was received via Trezor's responsible disclosure program on October 28.
  • Trezor has not yet physically examined the device.
  • No buyers from CryptoBilis have reported a loss of funds.

Reported by only some outlets

  • The specific device was purchased through the Indonesian e-commerce platform Tokopedia in August 2026.
  • The implant reportedly includes an extra circuit board designed to read the wallet backup from the screen and transmit it via a mobile network.
  • Trezor noted the attack appears similar to a previous case involving Ledger.

FreeDaily Brief newsletter

Get the 5-minute Daily Brief, with the topics you pick.

The Daily Brief is free

About these outlets

CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.